Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
File:                     ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json)
Hash identifier:          Pu5qb8RbQ8HE9IdL4BR6V+zgoy8giRRlKDL1oTUppvE=
Subject key identifier:   7C:7F:EE:E9:B8:A6:F5:C4:8B:D0:ED:12:71:4C:2A:0C:BB:E9:A7:A6
Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44
Certificate issuer:       /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544
Certificate serial:       030B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
Manifest number:          0304
Signing time:             Sun 15 Nov 2026 00:52:10 +0000
Manifest this update:     Sun 15 Nov 2026 00:52:10 +0000
Manifest next update:     Sun 22 Nov 2026 00:52:10 +0000
Files and hashes:         1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: eS0POoh0YqmEUlCyv4Kmr8yJvKk9owanz8qt5UsFo9U=)
                          2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: MRcKSGRFYJf8cnQm7tu7BzVZBZdhD0H2CFY4n8nd0BE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl
                          rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544
        Validity
            Not Before: Nov 15 00:52:10 2026 GMT
            Not After : Nov 22 00:52:10 2026 GMT
        Subject: CN=6af9023a-70a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:49:43:12:c0:1e:08:e2:6a:75:6f:c6:c2:
                    5b:7c:17:b6:b8:4b:22:95:09:d0:4c:21:6b:5d:92:
                    00:d3:cd:e6:4e:e5:ed:16:15:02:e9:30:56:7a:2d:
                    3a:99:38:76:8e:1d:a9:c2:41:fa:1f:07:3f:f6:1d:
                    19:99:41:52:5c:ab:30:65:c0:80:87:c5:60:c2:02:
                    bc:c2:55:67:bd:79:e9:a3:e5:cc:51:4c:fb:52:54:
                    a7:29:e4:04:29:50:28:eb:3c:01:b1:91:6e:2a:a7:
                    4a:39:6d:58:89:92:68:2d:3e:a4:0b:e2:be:7d:40:
                    52:68:78:6e:a6:29:d4:37:68:27:cb:e7:e6:38:b2:
                    4c:f5:a6:db:f5:2b:7b:db:a7:25:a7:f3:2a:67:a2:
                    67:7d:2c:80:d1:b9:e2:6e:a8:a5:ba:91:71:7b:1a:
                    80:eb:06:0a:fc:48:2f:e6:fc:a2:91:48:ec:46:88:
                    fe:02:8e:4c:a9:e4:49:78:0c:5e:6e:6b:1e:71:c1:
                    6b:05:aa:77:23:1b:8e:b7:e0:8d:2b:16:dd:b3:e2:
                    df:79:a6:ab:0a:20:fb:32:31:bb:3a:f0:27:e1:5f:
                    f8:d3:c9:fe:74:07:8d:a4:af:90:ac:6c:c3:45:21:
                    d8:72:03:dd:5a:85:48:6b:92:57:b1:7f:de:d4:4f:
                    9d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7F:EE:E9:B8:A6:F5:C4:8B:D0:ED:12:71:4C:2A:0C:BB:E9:A7:A6
            X509v3 Authority Key Identifier:
                keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:53:ba:e0:dd:b9:81:9e:99:11:8f:3a:a2:38:3a:21:63:
         b5:1b:61:b5:81:98:6f:8a:fc:88:67:75:49:19:9f:5b:ae:4d:
         66:9d:bd:13:c7:f6:8d:20:94:06:3b:76:bc:8f:7d:53:69:f9:
         ea:d0:f6:b5:f8:1d:89:58:2a:27:c8:59:71:dd:a6:9e:6d:92:
         10:aa:c4:15:41:4d:30:1f:76:1b:ef:de:33:44:21:c8:37:39:
         8c:49:d4:8a:6f:dd:48:33:4e:64:88:91:73:75:b1:54:6c:48:
         69:bd:bb:f9:1a:bc:21:a8:44:47:e0:6a:34:14:a0:c2:2b:44:
         e4:20:69:58:02:89:a0:86:44:0a:75:16:c9:c4:c6:21:db:6c:
         e9:68:bc:13:d5:cd:5f:c2:e6:7f:04:59:46:04:70:ba:73:9f:
         00:f8:c4:ea:b0:6c:1d:79:65:2e:b8:db:ae:e8:0b:f1:ad:60:
         23:9a:3d:1e:8f:1c:d6:b8:1c:74:bf:6c:c4:9b:13:d0:cf:6f:
         9e:b7:54:12:46:1e:7e:31:d7:10:7e:c9:6a:79:ac:87:aa:cd:
         f6:60:0b:66:8a:a6:d8:27:f0:f5:98:4f:e9:73:c9:2b:af:84:
         cd:6a:6e:11:41:53:df:b9:4c:62:82:9d:cc:9a:2f:c7:a2:21:
         8e:6c:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:55:20 2026 by rpki-client